[Samba] Problem idmap_ad

[Leszek Szczepanowski]

Yup,

It was me, with slightly different problem. That I fixed myself even before
you was able to respond, but the way you respond - thanks anyway.
What surprises me however is why if we ask for a group with wbinfo, we can
add any suffix to the existing group in a query, and the result is always
like without a suffix.
I can't see any sense in this, but during my investigation the the
different mapping for the same group, resulted in answer:

wbinfo --lookup-sids="S-1-5-21-725345543-1060284298-1708537768-513"
S-1-5-21-725345543-1060284298-1708537768-513 -> <none>\Domain Users 2

And when I tried to query about this "Domain Users 2" it returned "Domain
Users". Then I tried to query for "Domain Users anystring" and it also
returned "Domain Users".
Is it a bug, or a feature? :)


śr., 14 gru 2022 o 13:19 Rowland Penny via samba <samba at lists.samba.org>
napisał(a):

>
>
> On 14/12/2022 12:16, Rowland Penny via samba wrote:
> >
> >
> > On 14/12/2022 11:53, Stefan Kania via samba wrote:
> >> Why do you use idmap-backend ad anyway? Is there a reason not to use
> >> the backend rid? It's much easier to handle, you don't have to look a
> >> GidNumber and UidNumer you only need the RID every user has in an
> >> Active Directory.
> >>
> >>
> >
> > I wondered that, but he has now opened another thread where he appears
> > to be using 'rid' and done what I thought was impossible, got two ID's
> > for the same group.
> >
> > Rowland
> >
> >
>
> SIGH!
> Ignore this, getting mixed up again.
>
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


-- 
-- 
Leszek A. Szczepanowski
twinsen at mspanc.net